$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa File: 9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa (raw, json) Hash identifier: uckSDsms/eY4qiExdBH2g29hUBrhQjzObGV1/mKbYXI= Subject key identifier: 80:C7:49:4F:BB:0F:3E:C7:F7:52:E3:7B:1D:11:71:29:06:52:6F:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF4E9D969268AD3D65C4C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 204.216.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:4e:9d:96:92:68:ad:3d:65:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=367af7d3-d3e0-4b43-b3d2-c1c8370c8b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:6e:17:3c:db:f1:46:5c:69:0e:3c:f1:db: bf:5c:d5:97:18:54:1d:fd:46:d7:0d:e5:2d:8a:e9: 81:2d:6a:f5:1a:bf:c7:a5:74:da:14:8f:bc:27:a0: e9:55:c0:bd:13:3b:0a:e4:74:9f:ea:c3:fe:b6:65: 97:37:55:82:58:dc:7c:1a:05:f1:b4:6e:20:d7:cb: fa:a8:4b:64:cd:a4:00:e0:68:30:ce:e4:57:c4:23: b5:04:19:a2:65:a5:31:14:d7:a2:7d:cf:f1:02:c8: 63:2b:b0:b8:9d:6b:83:f2:12:07:89:45:4f:3b:78: be:42:55:79:ca:86:27:4f:4e:59:f0:83:56:9e:b7: 04:1f:fc:66:81:c2:6d:25:a8:dc:06:ce:34:0e:80: 4a:fb:b7:22:9a:6f:89:6f:31:03:59:8b:21:cf:fe: b2:0f:0c:ff:cf:ea:4c:8a:1e:f7:e0:0f:45:63:2d: c3:fc:bb:48:d8:a2:e8:0e:bc:b4:24:c0:9d:9a:78: 23:e2:1d:f2:66:90:0e:15:24:b9:ca:b3:d2:2b:db: e8:33:73:85:fb:65:ef:c0:d4:26:a2:a6:00:22:b5: 4a:45:11:09:72:ac:4a:cb:af:b2:63:45:37:44:1c: 9c:33:2b:77:a0:88:37:b6:29:30:16:c9:1c:43:a7: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C7:49:4F:BB:0F:3E:C7:F7:52:E3:7B:1D:11:71:29:06:52:6F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:29:87:76:14:93:4f:23:18:41:cc:5f:df:10:ab:d4:ad:d4: 22:47:45:d6:90:94:9c:00:50:fe:31:63:d0:66:34:2d:46:e0: 69:52:ad:38:3d:73:ec:24:f9:0f:74:ea:c1:8e:70:49:98:85: e8:55:56:ae:d9:6f:6b:4e:d9:aa:8c:7a:23:f6:f2:2d:05:e1: 5d:c7:31:6b:eb:53:25:fa:88:ad:ac:9c:db:ba:10:88:9c:2e: 6b:b6:70:04:86:63:50:a9:10:62:11:6a:3f:44:b9:34:04:df: 3a:ee:24:03:73:44:34:8b:1e:5b:f7:5c:5c:5a:51:ff:20:30: 47:1a:45:01:8e:1f:de:ee:cf:54:15:6f:3a:49:fd:26:09:f2: 35:52:12:27:c2:a3:4b:b8:24:cc:56:8d:a5:71:9e:ea:2a:3f: 62:7a:4b:b6:fe:4a:a1:53:59:10:c1:e5:41:a9:b2:1f:42:4d: 47:32:0e:9c:b0:97:2f:49:5b:6a:1b:e0:2a:de:53:04:5d:46: de:e6:9a:62:90:30:6e:82:21:bb:3b:cb:1a:b7:98:86:8a:7b: 5c:dc:94:a1:c2:52:29:de:77:0e:75:98:49:29:01:4d:ba:0b: ec:d3:ef:0d:76:64:e4:65:80:61:af:70:28:71:00:7e:a6:d0: 51:93:94:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f306dlpJorT1lxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MzY3YWY3ZDMtZDNlMC00YjQzLWIzZDItYzFjODM3MGM4YjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2ZuFzzb8UZcaQ488du/XNWXGFQd/UbXDeUt iumBLWr1Gr/HpXTaFI+8J6DpVcC9EzsK5HSf6sP+tmWXN1WCWNx8GgXxtG4g18v6 qEtkzaQA4GgwzuRXxCO1BBmiZaUxFNeifc/xAshjK7C4nWuD8hIHiUVPO3i+QlV5 yoYnT05Z8INWnrcEH/xmgcJtJajcBs40DoBK+7cimm+JbzEDWYshz/6yDwz/z+pM ih734A9FYy3D/LtI2KLoDry0JMCdmngj4h3yZpAOFSS5yrPSK9voM3OF+2XvwNQm oqYAIrVKRREJcqxKy6+yY0U3RBycMyt3oIg3tikwFskcQ6ctnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDHSU+7Dz7H91Ljex0RcSkGUm8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWQ3MGU1ZDYtMzg4Yi0z YTYwLTlmMTktNGYwNDEwZjkzNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4ph3YUk08jGEHMX98Qq9St1CJHRdaQlJwAUP4xY9BmNC1G4GlSrTg9 c+wk+Q906sGOcEmYhehVVq7Zb2tO2aqMeiP28i0F4V3HMWvrUyX6iK2snNu6EIic Lmu2cASGY1CpEGIRaj9EuTQE3zruJANzRDSLHlv3XFxaUf8gMEcaRQGOH97uz1QV bzpJ/SYJ8jVSEifCo0u4JMxWjaVxnuoqP2J6S7b+SqFTWRDB5UGpsh9CTUcyDpyw ly9JW2ob4CreUwRdRt7mmmKQMG6CIbs7yxq3mIaKe1zclKHCUinedw51mEkpAU26 C+zT7w12ZORlgGGvcChxAH6m0FGTlAE= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:10 2026 by rpki-client